$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: nIZtSVv5TY5O1TOpWWykRER8gpb3F+R7gRgeeiBRxf0= Subject key identifier: 74:0D:59:37:0A:54:EA:D0:9C:C6:F4:EA:09:59:C1:94:2F:4B:09:0F Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 59D9A936E1E121B0B9EE9A70893CF20FBD293808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 0185 Signing time: Sun 20 Jul 2025 07:11:24 +0000 Manifest this update: Sun 20 Jul 2025 07:06:24 +0000 Manifest next update: Wed 23 Jul 2025 15:32:24 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) 2: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: e4cSlJ1rHutFDOfuHbWQectw6qw5yYxcuwqgyPTWm08=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 4: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d9:a9:36:e1:e1:21:b0:b9:ee:9a:70:89:3c:f2:0f:bd:29:38:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jul 20 07:06:24 2025 GMT Not After : Jul 23 15:32:24 2025 GMT Subject: CN=740D59370A54EAD09CC6F4EA0959C1942F4B090F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:44:ce:12:83:08:cf:c0:af:74:c3:94:1b: 0b:41:2c:96:53:93:e7:3b:f4:e3:22:1c:ef:ca:c8: e8:73:03:98:10:93:fe:a8:a7:60:bd:ec:65:7d:1f: 69:24:2e:c5:bf:02:6e:3b:c7:68:cd:bb:3e:19:21: 3c:22:97:5e:ac:a5:b8:31:e5:29:58:4d:72:87:2f: 3d:46:95:a3:f5:f5:ad:34:f9:3c:3e:ba:08:94:bc: 39:eb:70:39:65:d6:e1:89:4b:c0:b5:b6:24:e0:11: e2:de:18:4d:f3:73:04:a7:e8:36:2d:c2:d9:ad:96: a2:33:75:2a:d5:ef:5d:55:78:a8:4d:d7:43:72:b9: 96:83:64:16:fe:8a:d5:bc:14:42:91:ca:d1:ca:2b: 7e:15:59:89:ac:87:8a:75:47:56:94:a0:a1:17:60: 20:42:1e:00:97:e8:eb:76:56:6f:e9:f1:10:1d:df: e9:19:57:c7:3a:b3:00:2f:66:79:07:03:c5:92:b4: 82:79:c0:c0:38:2e:da:21:cc:58:4b:a5:c5:86:d8: 12:00:5b:a0:fc:6f:d9:1b:d2:c5:7f:73:cd:f4:46: 7f:ef:fe:3c:39:ad:c6:02:e1:ca:2d:94:49:6c:ca: ed:af:ec:f4:e9:83:48:4c:8e:71:61:00:77:c0:34: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0D:59:37:0A:54:EA:D0:9C:C6:F4:EA:09:59:C1:94:2F:4B:09:0F X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:d6:6f:71:6e:be:41:43:0a:08:af:c4:fc:08:2e:35:11: 89:d5:25:58:40:50:49:27:d7:af:4e:a3:14:a0:9f:79:65:a2: 87:fc:5c:c5:4d:4a:52:8e:00:4d:29:e4:78:a0:99:0f:4e:3a: 1f:ae:af:e5:7f:8d:61:25:8b:61:85:cd:36:32:0b:59:e9:2e: b0:32:51:c4:56:90:80:b0:ef:9b:9f:02:f5:21:1b:d8:f7:e9: 06:c8:2b:24:ad:ad:e3:16:41:db:66:fc:19:47:b6:57:25:5a: 13:da:a5:d8:dc:b3:cb:0f:74:66:6a:c8:f6:78:1d:09:3d:a7: db:d2:60:45:cd:72:41:70:ce:0e:d5:de:b0:95:05:44:66:64: e3:16:35:83:80:a0:bf:ab:59:51:32:99:4e:81:0f:72:f4:b4: fb:d5:84:01:53:2c:90:24:6b:0c:41:cf:44:7d:dd:9c:0f:c9: 93:0c:41:5f:b8:13:85:78:75:ef:2f:0f:c1:95:e9:a1:62:88: 5d:25:bb:f7:66:df:c2:57:82:c7:44:b5:d0:eb:0b:b4:55:cf: 96:90:b7:17:47:a2:ae:6c:b6:36:6a:68:f0:78:f1:d5:18:aa: d8:39:82:ef:e3:e3:2c:20:d3:24:df:93:b2:50:7d:05:c6:62: 3d:cb:66:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdmpNuHhIbC57ppwiTzyD70pOAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA3MjAwNzA2MjRaFw0yNTA3MjMxNTMyMjRaMDMxMTAvBgNV BAMTKDc0MEQ1OTM3MEE1NEVBRDA5Q0M2RjRFQTA5NTlDMTk0MkY0QjA5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24ETOEoMIz8CvdMOUGwtBLJZT k+c79OMiHO/KyOhzA5gQk/6op2C97GV9H2kkLsW/Am47x2jNuz4ZITwil16spbgx 5SlYTXKHLz1GlaP19a00+Tw+ugiUvDnrcDll1uGJS8C1tiTgEeLeGE3zcwSn6DYt wtmtlqIzdSrV711VeKhN10NyuZaDZBb+itW8FEKRytHKK34VWYmsh4p1R1aUoKEX YCBCHgCX6Ot2Vm/p8RAd3+kZV8c6swAvZnkHA8WStIJ5wMA4LtohzFhLpcWG2BIA W6D8b9kb0sV/c830Rn/v/jw5rcYC4cotlElsyu2v7PTpg0hMjnFhAHfANF+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdA1ZNwpU6tCcxvTqCVnBlC9LCQ8wHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmq1m9xbr5BQwoIr8T8CC41EYnVJVhAUEkn 169OoxSgn3lloof8XMVNSlKOAE0p5HigmQ9OOh+ur+V/jWEli2GFzTYyC1npLrAy UcRWkICw75ufAvUhG9j36QbIKyStreMWQdtm/BlHtlclWhPapdjcs8sPdGZqyPZ4 HQk9p9vSYEXNckFwzg7V3rCVBURmZOMWNYOAoL+rWVEymU6BD3L0tPvVhAFTLJAk awxBz0R93ZwPyZMMQV+4E4V4de8vD8GV6aFiiF0lu/dm38JXgsdEtdDrC7RVz5aQ txdHoq5stjZqaPB48dUYqtg5gu/j4ywg0yTfk7JQfQXGYj3LZvY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:14 2025 by rpki-client